Overview

overview

10

Static

static

7

5413aa7824...9a.apk

android-9-x86

10

5413aa7824...9a.apk

android-10-x64

10

5413aa7824...9a.apk

android-11-x64

10

HoneJSCoreJSBridge.js

windows7-x64

1

HoneJSCoreJSBridge.js

windows10-2004-x64

1

liveWallpa...in.apk

android-9-x86

5

liveWallpa...in.apk

android-10-x64

1

liveWallpa...in.apk

android-11-x64

1

Resubmissions

30/08/2023, 14:03

230830-rc5mmsfg85 10

24/08/2023, 14:38

230824-rzwcgsdb55 10

Analysis

  • max time kernel
    1187133s
  • max time network
    87s
  • platform
    android_x86
  • resource
    android-x86-arm-20230824-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230824-enlocale:en-usos:android-9-x86system
  • submitted
    30/08/2023, 14:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    liveWallpaperPlugin.apk

  • Size

    162KB

  • MD5

    91d33062e74043bb0bd9d5f66b343f3e

  • SHA1

    aa3fab31cf6d5bc7fb1c012ada2b77ffe242a7c0

  • SHA256

    4c3720917d9920cdec450cc85fe2fe3db39bc48cff4fea270914b475fc79f08a

  • SHA512

    be5eb5cdab9e3348f3228fee40172b351a07d2d39ddd9d085593e3d78c13259be62425b4993a40696542902c452f7213a7b92410baf06192051640607389b80c

  • SSDEEP

    3072:QV8ZyGg6GYtzqWn1Vmkv7YVQi5cRVl/51SGHHkmjVw:w8ZLGYtrv7O09bSGHHkYw

Score
5/10
ransomware

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.tencent.qqlive.wallpaper
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4187
    • /system/bin/sh -c getprop
      2⤵
        PID:4220
      • getprop
        2⤵
          PID:4220
        • /system/bin/sh -c type su
          2⤵
            PID:4278

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.tencent.qqlive.wallpaper/app_crashrecord/1004
          Filesize

          235B

          MD5

          e086ebd3c43686175d7f4ed3490d1f10

          SHA1

          2d571a58ab9394669a09bc5b2213f22b7b2339ee

          SHA256

          5b85c147962cea7782ed1796f7e17a3d81dfc45e09218688aea1023bbe3b990b

          SHA512

          f0d5243b747db6cd650a0d709a04293c7769ac17929b0bec9c36b7be2120a36f176e7dabd6ff9fd49dac4aea201696c3369138022fe4efbef2468a7343ecdd6a

          Download Submit

        • /data/data/com.tencent.qqlive.wallpaper/app_crashrecord/1004
          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

          Download Submit

        • /data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          Download Submit

        • /data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_-journal
          Filesize

          512B

          MD5

          fbd0922befb7825460a92efc45193920

          SHA1

          956990c0894580d13bb86c469174976be4a39c61

          SHA256

          3703207e9ad881a52575d90655632c77a34fb82a83d0b9726eddab811933aa71

          SHA512

          20eaae16365beba713c1fa97077a7b0ff1c8cd3244d6a6413aac51a65ceaaf4af99834bad0cd47b041214b61baf3e144fad9920db78d9f33fb950de484b8503f

          Download Submit

        • /data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_-shm
          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          Download Submit

        • /data/data/com.tencent.qqlive.wallpaper/databases/bugly_db_-wal
          Filesize

          100KB

          MD5

          6655c301aaca1fbc8484742c1b9fc0cd

          SHA1

          b94d15f6a45f90d09c12c5c87273043cdfd1ead0

          SHA256

          8ff7ac2739eb725243b32ec135873cd0ee053ade45abb11fd00708ba132bd478

          SHA512

          f25419fae318465940caaceb8c29ab758ab12c5dedc9013cce4fcfeddfee221025a4797d815143946820408774ab23008a4687fd7f80bb92d03a64f89e70f82c

          Download Submit